8958 matches found
Design/Logic Flaw
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
Design/Logic Flaw
mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/vf?????, 2 /tmp/if?????, 3 /tmp/pf?????, 4 /tmp/af?????, 5 /tmp/rid?????, 6 /tmp/res?????, 7 /tmp/q?????, and 8 /tmp/bf????? temporary files...
CVE-2008-4988
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
CVE-2008-4984
scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/dpkg..tmp, b /tmp/missingdeps., and c /tmp/sb2-pkg-chk.$tstamp. temporary files, related to the 1 dpkg-checkbuilddeps and 2 sb2-check-pkg-mappings scripts...
CVE-2008-4983
scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/SciLink1, b /tmp/SciLink2, c /tmp/SciLink3, d /tmp/., e /tmp/..res, f /tmp/..err, and g /tmp/..diff temporary files, related to the 1 scilink, 2 scidoc, and 3 scidem scripts...
CVE-2008-4979
getipacctg in rancid 2.3.2a8 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/ipacct..prefixes, 2 /tmp/ipacct..sorted, 3 /tmp/ipacct..pl, and 4 /tmp/ipacct. temporary files...
CVE-2008-4976
ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/ogleaudio., b /tmp/oglecli., c /tmp/oglectrl., d /tmp/oglegui., e /tmp/oglempegps., f /tmp/oglempegvs., g /tmp/oglenav., and h /tmp/oglevout., temporary files, related to the 1...
Authentication flaw
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/bwk, b /tmp/zzz, and c /tmp/ggg temporary files, related to the 1 linuxtrade.bwkvol, 2 linuxtrade.wn, and 3 moneyam.helper scripts...
Code injection
getipacctg in rancid 2.3.2a8 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/ipacct..prefixes, 2 /tmp/ipacct..sorted, 3 /tmp/ipacct..pl, and 4 /tmp/ipacct. temporary files...
Code injection
rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.xml and 2 /tmp/.backup temporary files...
Design/Logic Flaw
ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...
Code injection
rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...
Code injection
i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...
Arbitrary file deletion
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...
CVE-2008-4968
The 1 rccs and 2 STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff. temporary file...
CVE-2008-4967
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/bwk, b /tmp/zzz, and c /tmp/ggg temporary files, related to the 1 linuxtrade.bwkvol, 2 linuxtrade.wn, and 3 moneyam.helper scripts...
CVE-2008-4966
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...
CVE-2008-4985
vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...